9 captures
17 Nov 2020 - 16 May 2022
Oct NOV May
Previous capture 17 Next capture
2019 2020 2021
The Wayback Machine - https://web.archive.org/web/20201117054914/https://repo.palemoon.org/MoonchildProductions/UXP/issues/1684

#1684 Rework blanket general.useragent.override pref

Open
opened 1 day ago by Moonchild · 5 comments
Moonchild commented 1 day ago

Several reasons:

  • This is a terrible Web Compat footgun
  • It causes confusion as to which pref has priority (are SSUAOs overridden by this pref?)
  • This should be done with finer granularity on a per-request basis, which can easily be done with a targeted extension manipulating request headers.

These things will have to be mitigated application-side.
Pref needs to be reworked to distance UXP from fallacies in mozilla-central development and the resulting unmaintained Firefox extensions, to neuter them.

Several reasons: - This is a terrible Web Compat footgun - It causes confusion as to which pref has priority (are SSUAOs overridden by this pref?) - This _should_ be done with finer granularity on a per-request basis, which can easily be done with a targeted extension manipulating request headers. These things will have to be mitigated application-side. Pref needs to be reworked to distance UXP from fallacies in mozilla-central development and the resulting unmaintained Firefox extensions, to neuter them.
Moonchild added the
C: Networking
label 1 day ago
Moonchild added the
Web Compatibility
label 1 day ago
Moonchild self-assigned this 1 day ago
JustOff commented 1 day ago

Let me repeat my forum post. The point is, it’s not only about request headers, but also about the navigator object. And being able to control general.buildID.override, general.oscpu.override, and general.useragent.override is pretty important for setting up a privacy-enhanced environment. Please don’t cut it out of the browser core.

Let me repeat my forum post. The point is, it's not only about request headers, but also about the navigator object. And being able to control general.buildID.override, general.oscpu.override, and general.useragent.override is pretty important for setting up a privacy-enhanced environment. Please don't cut it out of the browser core.
Moonchild commented 1 day ago
Owner

Let me repeat my reply, since you clearly can’t wait 5 minutes for an answer.

Actually, for web compatibility reasons, it is about request headers. The blanket override is a terrible footgun.

Off-topic for this issue:
Also, I don’t actually see why we need overrides for buildID and oscpu outside of a testing/debugging environment - seems they were added by Mozilla for just that, too. If you want to toss it up for privacy, then you may as well demand we add pref overrides for all the other properties of the Navigator object (because there are more unique values to be found there than what OS and what browser build you are using).
Either way, that would be something for a different issue.

Let me repeat my reply, since you clearly can't wait 5 minutes for an answer. Actually, for web compatibility reasons, it *is* about request headers. The blanket override is a terrible footgun. Off-topic for this issue: Also, I don't actually see why we need overrides for `buildID` and `oscpu` outside of a testing/debugging environment - seems they were added by Mozilla for just that, too. If you want to toss it up for privacy, then you may as well demand we add pref overrides for all the other properties of the Navigator object (because there are more unique values to be found there than what OS and what browser build you are using). Either way, that would be something for a different issue.
Moonchild closed this issue 1 day ago
Moonchild commented 1 day ago
Owner

If you want to provide reasons aside from “my old firefox extensions” or “I want it” to keep/restore this preference, then by all means weigh in on the issue on the forum where this is being discussed. Reasons for removing it have been given in comment 0
https://forum.palemoon.org/viewtopic.php?f=3&t=25624&start=20#p203598

If you want to provide reasons aside from "my old firefox extensions" or "I want it" to keep/restore this preference, then by all means weigh in on the issue on the forum where this is being discussed. Reasons for removing it have been given in comment 0 https://forum.palemoon.org/viewtopic.php?f=3&t=25624&start=20#p203598
Moonchild commented 1 day ago
Owner

Backed out for devtools breakage.

Backed out for devtools breakage.
Moonchild reopened this issue 1 day ago
Moonchild commented 11 hours ago
Owner

Following the discussion on the forum this issue will be repurposed.

Following the discussion on the forum this issue will be repurposed.
Moonchild changed title from Remove blanket general.useragent.override pref to Rework blanket general.useragent.override pref 11 hours ago
Sign in to join this conversation.
No Milestone
No Assignees
2 Participants
Notifications
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Loading…
There is no content yet.